Privacy Policy

1. Who we are

AtelierLab (“the Service”, “we”, “us”) is a client-management platform for architecture studios, operated by BitIngenuity (bitingenuity.com). This policy describes what information we collect through atelierlab.in and the AtelierLab application, how we use it, and the choices you have. For anything privacy-related, write to team@bitingenuity.com.

2. Information we collect

• Account information. When a studio or its client creates an account: name, email address, phone number, and login credentials (passwords are stored only as cryptographic hashes by our authentication provider).
• Client records. Information studios add about their own clients, such as names, contact details, and project notes. The studio is responsible for having the right to store this information.
• Documents. Drawings, PDFs, and other files studios upload to share with their clients.
• Payment records. Invoice amounts, payment status, and payment references returned by Razorpay. We never see, collect, or store card numbers, UPI PINs, or bank credentials. Payment is completed entirely on Razorpay's hosted checkout.
• Usage and audit records. Actions taken in the Service (documents shared, access granted, invoices raised) are logged for security and accountability.
• Cookies. We use only essential cookies needed to keep you signed in. No advertising or cross-site tracking cookies.

3. How we use information

• To provide the Service: workspaces, document sharing, chat, and payment-gated access.
• To process invoices and confirm payments through Razorpay.
• To secure the Service, investigate abuse, and maintain audit trails.
• To respond to support requests.
• To send service-related notices (not marketing, unless you opt in).

We do not sell personal data, and we do not use it for advertising.

4. Payments and Razorpay

Each studio connects its own Razorpay account to AtelierLab using Razorpay's official OAuth flow. Client payments are made on Razorpay's checkout and settle directly into the studio's own Razorpay account; AtelierLab never holds or routes funds. The OAuth tokens that authorize this connection are stored encrypted in transit and are accessible only to our servers, never to browsers or other users. Payment data handled by Razorpay is governed by Razorpay's privacy policy.

5. Service providers

We use a small number of infrastructure providers to run the Service, each receiving only what it needs to do its job:

• Supabase: database, authentication, and encrypted file storage.
• Razorpay: payment processing, as described above.
• Google (Gemini): powers the optional studio assistant. When a studio uses the assistant, relevant records from that studio's own workspace are sent to the model to compose an answer; they are not used to serve other studios.
• Hosting providers: serve the application and this website.

6. Storage and security

• All traffic is encrypted in transit (HTTPS).
• Every studio's workspace is isolated at the database layer with row-level security, so one studio's users can never query another studio's records.
• Documents live in private storage buckets and are served only through short-lived signed links, issued after an access check.
• Payment confirmations are accepted only with a verified cryptographic signature from Razorpay.

7. Retention and deletion

We keep your data while your account is active. If you close your account or ask us to delete it, we delete personal data and uploaded documents within a reasonable period, except records we must keep for legal, accounting, or dispute-resolution purposes. To request deletion, email team@bitingenuity.com.

8. Your rights

Subject to applicable law, including India's Digital Personal Data Protection Act, 2023, you may request access to, correction of, or deletion of your personal data, and you may withdraw consent where processing is based on it. Send requests to team@bitingenuity.com; we'll respond within the timelines the law requires. If a studio added your information as its client, we may direct your request to that studio, which controls those records.

9. Changes to this policy

If we make material changes, we'll update the effective date at the top of this page and notify account holders by email or in-app notice before the changes take effect.

10. Contact

BitIngenuity · bitingenuity.com · team@bitingenuity.com